News linked to both this project and an event.
Taiko, an Ethereum Layer 2 project, announced that its fix has been reviewed by independent security experts. The mainnet will resume operations in four steps, including: deploying the fix and confirming the chain's final state is correct, ensuring there are no invalid checkpoints or attacker-submitted records that could be accepted; replenishing cross-chain bridge liquidity to ensure all L2 assets maintain a 1:1 reserve; restoring network operations and reopening L2 transfers, swaps, and trading functions; and having the security committee propose lifting the bridge suspension to fully restore asset deposit and withdrawal functionality.Taiko stated that during the initial reopening period, relatively conservative withdrawal limits will be set as an additional security measure, but this is not expected to affect users' normal asset operations.
Ethereum Layer 2 blockchain Taiko has stated its chain state verification mechanism has been compromised, and the security assumptions of all bridges deployed on Taiko can no longer be relied upon. It urges users to immediately withdraw funds from the relevant bridges. Taiko says it is coordinating with partners to control the incident and has suspended the affected systems.Crypto security firm Blockaid stated that the root cause appears to be a flaw in the way Taiko's bridge validates source signals. Attackers can submit message proofs on Ethereum that lack legitimate proof from the Taiko chain, thereby registering and withdrawing fraudulent bridge messages. This leads to the unauthorized release of assets from the ERC20 treasury. Blockaid estimates at least $1 million was stolen, while Lookonchain and PeckShield believe the value of stolen assets could be as high as $1.7 million.PeckShield reported that the attacker has transferred approximately 1.99 million TAIKO tokens to MEXC, valued at around $189,000. Data from blockchain intelligence firm Arkham shows that the Taiko attacker's wallet holds approximately $1.5 million in assets, primarily in Ether. (Cointelegraph)
According to PeckShieldAlert monitoring, the Taiko attacker has transferred 1.99 million TAIKO tokens to MEXC, worth approximately $189,100.
Taiko stated on its X platform that it has confirmed its chain state verification mechanism has been compromised, and the security assumptions of all cross-chain bridges deployed on Taiko are no longer reliable.Taiko said it is coordinating with its security committee and ecosystem partners to control the situation, suspending affected systems, and taking technical and legal actions. Taiko strongly advises all users to immediately withdraw funds from cross-chain bridges deployed on Taiko.Additionally, Taiko has made an urgent request for all centralized exchanges to suspend TAIKO token deposit services until further official notice. Previously, Taiko's ERC20 Vault was attacked, resulting in losses exceeding $1 million.